OIDC | Prajwol Bikram Adhikari

A five-stage GitOps pipeline diagram showing a Terraform deployment workflow. The stages, marked with green checkmarks, include OIDC Authentication, Terraform Plan (Fmt/Validate/Plan), AWS S3 Remote State Locking, Terraform Apply (deploying 13 DNS records and an Oracle VCN/Instance), and Branch Protection. The pipeline concludes with an 'Infrastructure Updated' globe icon.

Part 2: Infrastructure as Code with Terraform, OIDC, and a GitOps Pipeline

How I brought my hybrid cloud homelab under Terraform management — 13 Cloudflare DNS records, an Oracle Cloud instance, remote state in AWS S3, and a GitHub Actions pipeline with secretless OIDC authentication. No more clicking around in dashboards.

May 8, 2026 14 min read

GitHub Actions workflow showing all five pipeline stages with green checkmarks — Gitleaks, CodeQL, Build Hugo, Lighthouse Audit, and Deploy to GitHub Pages.

Part 1: Building a Security-Gated CI/CD Pipeline with GitHub Actions

Learn how to build a professional, multi-stage DevSecOps pipeline for your portfolio site using GitHub Actions. This guide covers parallel security gates with Gitleaks and CodeQL, containerized Hugo builds, Lighthouse performance audits, and secretless OIDC deployments — no stored tokens.

Apr 10, 2026 14 min read